Guarding Your Website Against SQL Injection Attacks

Okay, you've planned your database-driven website, and since you understand the importance of web security, you've taken extra efforts to protect the server. All the security patches have been applied. Your firewall is configured. A DMZ is protecting your database and business secrets. You're safe and ready to bring the site live, right? Before you act too fast, you should ask yourself, 'Did I test my site against SQL Injection attacks?'" In this article, Beth Breidenbach examines the risks posed by SQL injection and the coding tools that we can use to protect ourselves.